Detections
Analytics
CVE-2026-116533
critical
Description
The Static Snapshot WordPress plugin through 0.2.1 does not sanitise shell metacharacters in a user-supplied value before concatenating it into operating-system commands run by the server, allowing unauthenticated attackers to execute arbitrary commands on the host.
References
https://wpscan.com/vulnerability/bdf02d4a-3775-410b-b86f-d9dc2408cf2f/